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Amendme nts to the Claims- 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 



Listing of Claims: 

1 . (Canceled). 

2. (Currently amended) A computer system, comprising at ie»^ mQ 
processor, a system memory coupled to said processor at least one ?nmitM,,t p ,.t 
device coupled to said processor, and g watchdog tim er device wh»r»in +h„ 
computer system executes: 

an operating system wit h at least two protection lay ers; 



one or more compute r applications; anrl 



an application watchdog driver that m o nitors user designated cnm pitfur 

applicati ons for periodic messages; 

wherein if the watchdog driver receives a periodic message from all i. un- 
designated computer applications in a predetermined period of time «h» 
watchdog driver delivers a command to d ear the watchdog timer device; 
The oomputor oyotom of claim 1 further compr i o i ng: 

a message passing interface that transmits signals between the two 
protection layers; and 

wherein the watchdog driver executes in one protection layer and the 
application executes in another protection layer and wherein the periodic 
message is transmitted from the application to the application watchdog driver 
through the message passing interface. 

3. (Original) The computer system of claim 2 wherein: 

the message passing interface is a shared memory queue. 
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| 4. (Currently amended) The computer system of claim 2 [[1]] wherein: 

the watchdog timer device resides in a hardware layer separate from the 
operating system protection layers and wherein the application watchdog driver 
communicates with the watchdog timer device via a hardware abstraction layer. 

| 5. (Currently amended) The computer system of claim 2 [[1]] further 
comprising a system watchdog timer device; 

wherein the computer system also executes a system watchdog driver that 
monitors the operating system for periodic messages; and 

wherein if the system watchdog driver receives a periodic message from 
the operating system in a predetermined period of time, the system watchdog 
driver delivers a command to clear the system watchdog timer device. 

6. (Original) The computer system of claim 5 wherein; 

the watchdog timer devices issue a reset command if either of the 
watchdog timer devices do not receive a clear timer command from the watchdog 
drivers in a predetermined period of time. 

7. (Original) An application watchdog, comprising a dedicated watchdog 
counter in the hardware layer of a computer system, and a watchdog driver 
operating in the kernel mode of the computer operating system, the watchdog 
driver comprising: 

a system thread configured to monitor a plurality of designated user 
applications operating in the user mode of the computer operating system; 

a message passing interface for receiving periodic signals from each of the 
user applications; and 

a communication interface for transmitting a timer reset command to the 
dedicated watchdog counter; 

wherein if the system thread receives a message from each of the 
designated user applications within an allotted period of time, the watchdog driver 
sends a timer reset command to the dedicated watchdog counter and wherein if 
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the system thread does not receive a message from each of the designated user 
applications within the allotted period of time, the watchdog driver does not send 
a timer reset command to the dedicated watchdog counter. 

8. (Original) The application watchdog of claim 7 wherein: 

if the watchdog counter does receive a timer reset command from the 
watchdog driver, the counter is reset to begin counting down from the maximum 
allotted period of time and wherein if the watchdog counter does not receive a 
timer reset command from the watchdog driver, the counter is configured to 
restart the computer system when the counter expires. 

9. (Previously presented) An application watchdog, comprising a dedicated 
watchdog counter in the hardware layer of a computer system, and a watchdog 
driver operating in the kernel mode of the computer operating system, the 
watchdog driver comprising: 

a system thread configured to monitor a plurality of designated user 
applications operating in the user mode of the computer operating system; 

a message passing interface for receiving periodic signals from each of the 
user applications; and 

a communication interface for transmitting a timer reset command to the 
dedicated watchdog counter; 

wherein if the system thread receives a message from each of the 
designated user applications within an allotted period of time, the watchdog driver 
sends a timer reset command to the dedicated watchdog counter and wherein if 
the system thread does not receive a message from each of the designated user 
applications within the allotted period of time, the watchdog driver does not send 
a timer reset command to the dedicated watchdog counter; 

wherein, if the watchdog counter does receive a timer reset command 
from the watchdog driver, the counter is reset to begin counting down from the 
maximum allotted period of time and wherein if the watchdog counter does not 
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receive a timer reset command from the watchdog driver, the counter is 
configured to restart the computer system when the counter expires 

wherein the watchdog counter further comprises, a timer value register 
that stores a digital representation of the maximum allotted period of time; and 
a control and status register that comprises: 

a bit for enabling the application watchdog; 
a bit for counter reset; 

bit fields for enabling early expiration warnings; and 
bit fields for early expiration warning signals; 
wherein if the watchdog counter does not receive a timer reset command 
from the watchdog driver and the early expiration warnings are enabled, the 
counter is configured to transmit early expiration warnings to the rest of the 
computer system before the counter expires. 

1 0. (Original) The application watchdog of claim 9 wherein: 
the early warning messages are non-mask interrupts. 

1 1 - (Original) The application watchdog of claim 9 wherein: 
the early warning messages are maskable interrupts. 

1 2. (Original) The application watchdog of claim 9 wherein: 

the early warning messages are system management interrupts. 

1 3. (Original) The application watchdog of claim 7 wherein: 

the messages from the designated user applications are sent periodically 
by the applications and directed specifically to the watchdog driver. 

14. (Original) The application watchdog of claim 7 wherein: 

the plurality of the user applications are prioritized by a computer user to 
permit varying levels of watchdog protection. 
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1 5. (Original) The application watchdog of claim 7 wherein: 

the application watchdog operates in conjunction with a system watchdog 
that is configured to monitor the computer operating system for periodic activity 
and 

wherein both the application watchdog and the system watchdog are 
sufficiently configured to restart the computer system if either watchdog does not 
receive a timer reset command within an allotted period of time. 

16. (Original) A method of detecting and restarting an unresponsive computer 
application, comprising: 

executing the application in a first protective layer of a computer operating 
system; 

executing an application watchdog driver in a second, more protected, 
protective layer of the computer operating system; 

establishing a message passing interface between the application and the 
watchdog driver; 

periodically transmitting signals from the application to the message 
passing interface; 

executing a system thread in the watchdog driver that is configured to 
monitor the message passing interface for the periodic signals from said 
application or other designated applications; and 

using a dedicated watchdog timer device to count from a programmable 
initial value to a final system reset value; 

wherein if the system thread detects a periodic signal from the application 
before the watchdog timer counts to the final system reset value, the watchdog 
driver initiates a command to the watchdog timer to reset the watchdog timer to 
the initial value and wherein if the system thread fails to detect a periodic signal 
from the application before the watchdog timer counts to the final system reset 
value, the watchdog timer initiates a command to restart the computer system. 
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1 7. (Original) The method of claim 16 further comprising: 

sending an early warning message to notify system management software 
or firmware that the watchdog timer is about to expire. 

18. (Original) The method of claim 16 wherein the initialization of the 
watchdog driver comprises: 

loading the watchdog driver as the operating system loads following a 
computer system boot; and 

loading and creating an initial input/output control signal interface that 
establishes the message passing interface. 

19. (Original) The method of claim 18 wherein the initialization of the 
computer application comprises: 

linking the application with a dynamic link library; 

calling the watchdog driver via the dynamic link library and through the 
initial input/output control signal interface to validate the message passing 
interface; and 

sending application location and identification information to the watchdog 

driver. 

20. (Original) The method of claim 19 wherein the initialization of the 
watchdog timer device comprises: 

setting the timer initialization value in a timer value register in the watchdog 
timer device; and 

setting the counter enable bit and early warning enable bits in a 
control/status register in the watchdog timer device. 

21. (Currently amended) Tho mothod of cla i m 17 whoroi i >. A method of 
detecting and restarting an unresponsive r p mputer anp iic gtion. comp rising- 

executing the application in a first protect s f aver Q f a rn mpu t er opprafing 

system: 
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. executing an application watchdog driver in a second more protected 



protective layer of the co mputer op er ating system; 

establishing a message passing interface betw e en the application an n ^ 

watchdog driver; 

periodically transmitting signals from the application to the menag e 



passing interface 



executing a system thread in the watchdon d r iver that is confin ,.^ *» 



monitor the message passing interfere fnr the periodic Canals from ca.H 
application or othe r designated applications; 

"Sing a dedicated watchdog timer device tn count from a programmable 

initial va lue to a final system reset value; 

wherein if the system thread detects a periodi c signal from th e application 

before the watchdog timer counts to the fin*, system reset w a .., q , tne wafnMnf] 
driver initiates a command to the watchdon ti m er to reset the watchdon timer to 
the initial value and wherein if the system thre a d fails to detect a DeTiadtP . S i n na i 
from the application before the watchdon timer counts to the final sy stem r~.pt 
value, the watchdog timer initiates a com mand to restart the computer ^ tem; 

sending an early warning message to notif y system management software 

or firmware that the watchdog timer i s about to em pire; anH 

the early warning messages are NMI and SMI interrupts that are sent 9 
seconds before the watchdog timer device expires. 

22. (Original) The method of claim 16 wherein: 

the system thread must detect a periodic signal from all designated 
applications before initiating the command to the watchdog timer to reset the 
watchdog timer to the initial value. 

23. (Withdrawn) A computer system, comprising: 

an operating system with at least two protection layers; 
one or more computer applications; and 
at least two watchdog drivers; 
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wherein a first of the plurality of watchdog drivers is configured to monitor 
the operating system for periodic messages and a second of the plurality of 
watchdog drivers is configured to monitor the computer applications for periodic 
messages; and 

wherein if the second watchdog driver receives a periodic message from 
the computer applications in a predetermined period of time, the second 
watchdog driver delivers a command to clear the second of the plurality of 
watchdog timer devices. 



24. (Withdrawn) The computer system of claim 23 wherein: 

if the first watchdog driver receives a periodic message from the operating 
system in a predetermined period of time, the first watchdog driver delivers a 
command to clear the first of the plurality of watchdog timer devices. 

25. (Withdrawn) The computer system of claim 24 wherein: 

the watchdog timer devices are configured to restart the computer system 
if either of the watchdog timer devices do not receive a clear timer command from 
the watchdog drivers in a predetermined period of time. 

26. (Withdrawn) The computer system of claim 23 wherein: 

the watchdog driver creates timer events in the operating system 
scheduler that alert the watchdog driver when the predetermined period of time 
has expired. 



27. (Currently Amended) A computer server, comprising: 

a central processing unit ("CPU") configured to execute an operating 
system and keyrdesignated user applications; 

a system memory coupled to said CPU; 

an input/output processor ("IOP") configured to control server management 
architecture; 
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a system watchdog device configured to receive periodic messages from 
the operating system; and 

an application watchdog device configured to receive periodic messages 
from the user applications; 

wherein if either the system watchdog device or the application watchdog 
device does not receive a periodic message for a designated period of time, the 
watchdog device that does not receive the periodic messages initiates a 
command to the CPU to reset the server. 

28. (Original) The computer server of claim 27 wherein: 

the system watchdog and application watchdog may be selectably enabled 
or disabled independent of one another. 

29. (Original) The computer server of claim 28 wherein: 

the watchdog devices are selectably configured to transmit an early 
warning interrupt to the CPU before the watchdog device initiates the server reset 
command. 

30. (Original) The computer server of claim 28 wherein: 

the watchdog devices are selectably configured to transmit an early 
warning notification to Hie IOP before the watchdog device initiates the server 
reset command. 

31 . (Original) The computer server of claim 28 wherein: 

the watchdog devices are selectably configured to transmit an event notification 
to the IOP when the watchdog device initiates the server reset command. 
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